The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugememUpgrade kernel-xenUUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-smpUpgrade kernel-hugemem-develUpgrade kernel-xenU-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-smp-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-debug-devel | Dec 1, 2016 | Nov 9, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 9, 2009 |
| Suse | — | Upgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-defaultUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-paeUpgrade ext4dev-kmp-ppc64Upgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade oracleasm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade kernel-pae-baseUpgrade kernel-kdumpUpgrade iscsitarget-kmp-defaultUpgrade kernel-symsUpgrade kernel-vmi-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.15-55-hppa64-smp | Nov 8, 2024 | Nov 9, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Nov 9, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub